nerdexam
Google

PROFESSIONAL-CLOUD-NETWORK-ENGINEER · Question #20

Your company is running out of network capacity to run a critical application in the on-premises data center. You want to migrate the application to GCP. You also want to ensure that the Security…

The correct answer is A. VPC flow logs B. Firewall logs. VPC Flow Logs records a sample of network flows sent from and received by VM instances, including instances used as GKE nodes. These logs can be used for network monitoring, forensics, real-time security analysis, and expense optimization…

Submitted by yaw92· Apr 18, 2026Implementing network security

Question

Your company is running out of network capacity to run a critical application in the on-premises data center. You want to migrate the application to GCP. You also want to ensure that the Security team does not lose their ability to monitor traffic to and from Compute Engine instances. Which two products should you incorporate into the solution? (Choose two.)

Options

  • AVPC flow logs
  • BFirewall logs
  • CCloud Audit logs
  • DStackdriver Trace
  • ECompute Engine instance system logs

How the community answered

(24 responses)
  • A
    79% (19)
  • C
    4% (1)
  • D
    13% (3)
  • E
    4% (1)

Explanation

VPC Flow Logs records a sample of network flows sent from and received by VM instances, including instances used as GKE nodes. These logs can be used for network monitoring, forensics, real-time security analysis, and expense optimization. https://cloud.google.com/vpc/docs/using-flow-logs Firewall Rules Logging allows you to audit, verify, and analyze the effects of your firewall rules. For example, you can determine if a firewall rule designed to deny traffic is functioning as intended. Firewall Rules Logging is also useful if you need to determine how many connections are affected by a given firewall rule. You enable Firewall Rules Logging individually for each firewall rule whose connections you need to log. Firewall Rules Logging is an option for any firewall rule, regardless of the action (allow or deny) or direction (ingress or egress) of the rule. https://cloud.google.com/vpc/docs/firewall-rules-logging

Topics

#Network Monitoring#Network Security#VPC Flow Logs#Firewall Logs

Community Discussion

No community discussion yet for this question.

Full PROFESSIONAL-CLOUD-NETWORK-ENGINEER Practice